Module org.elasticsearch.xcore
Class AbstractAuditMessage
java.lang.Object
org.elasticsearch.xpack.core.common.notifications.AbstractAuditMessage
- All Implemented Interfaces:
org.elasticsearch.xcontent.ToXContent,org.elasticsearch.xcontent.ToXContentObject
- Direct Known Subclasses:
AnomalyDetectionAuditMessage,DataFrameAnalyticsAuditMessage,InferenceAuditMessage,SystemAuditMessage,TransformAuditMessage
public abstract class AbstractAuditMessage
extends Object
implements org.elasticsearch.xcontent.ToXContentObject
-
Nested Class Summary
Nested classes/interfaces inherited from interface org.elasticsearch.xcontent.ToXContent
org.elasticsearch.xcontent.ToXContent.DelegatingMapParams, org.elasticsearch.xcontent.ToXContent.MapParams, org.elasticsearch.xcontent.ToXContent.Params -
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final org.elasticsearch.xcontent.ParseFieldstatic final org.elasticsearch.xcontent.ParseFieldstatic final intThe max length of an audit message in characters is 32766 / 4 = 8191 where 32766 is the limit in bytes Lucene sets for a term field and 4 is the max number of bytes required to represent a UTF8 character.static final org.elasticsearch.xcontent.ParseFieldstatic final org.elasticsearch.xcontent.ParseFieldstatic final org.elasticsearch.xcontent.ParseFieldFields inherited from interface org.elasticsearch.xcontent.ToXContent
EMPTY, EMPTY_PARAMS -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionprotected static final <T extends AbstractAuditMessage>
org.elasticsearch.xcontent.ConstructingObjectParser<T, Void> createParser(String name, AbstractAuditMessageFactory<T> messageFactory, org.elasticsearch.xcontent.ParseField resourceField) booleanabstract Stringfinal LevelgetLevel()final Stringfinal Stringfinal Stringfinal DateinthashCode()org.elasticsearch.xcontent.XContentBuildertoXContent(org.elasticsearch.xcontent.XContentBuilder builder, org.elasticsearch.xcontent.ToXContent.Params params) Methods inherited from class java.lang.Object
clone, finalize, getClass, notify, notifyAll, toString, wait, wait, waitMethods inherited from interface org.elasticsearch.xcontent.ToXContentObject
isFragment
-
Field Details
-
MESSAGE
public static final org.elasticsearch.xcontent.ParseField MESSAGE -
LEVEL
public static final org.elasticsearch.xcontent.ParseField LEVEL -
TIMESTAMP
public static final org.elasticsearch.xcontent.ParseField TIMESTAMP -
NODE_NAME
public static final org.elasticsearch.xcontent.ParseField NODE_NAME -
JOB_TYPE
public static final org.elasticsearch.xcontent.ParseField JOB_TYPE -
MAX_AUDIT_MESSAGE_CHARS
public static final int MAX_AUDIT_MESSAGE_CHARSThe max length of an audit message in characters is 32766 / 4 = 8191 where 32766 is the limit in bytes Lucene sets for a term field and 4 is the max number of bytes required to represent a UTF8 character.- See Also:
-
-
Constructor Details
-
AbstractAuditMessage
-
-
Method Details
-
createParser
protected static final <T extends AbstractAuditMessage> org.elasticsearch.xcontent.ConstructingObjectParser<T,Void> createParser(String name, AbstractAuditMessageFactory<T> messageFactory, org.elasticsearch.xcontent.ParseField resourceField) -
getResourceId
-
getMessage
-
getLevel
-
getTimestamp
-
getNodeName
-
toXContent
public org.elasticsearch.xcontent.XContentBuilder toXContent(org.elasticsearch.xcontent.XContentBuilder builder, org.elasticsearch.xcontent.ToXContent.Params params) throws IOException - Specified by:
toXContentin interfaceorg.elasticsearch.xcontent.ToXContent- Throws:
IOException
-
hashCode
public int hashCode() -
equals
-
getJobType
- Returns:
- job type string used to tell apart jobs of different types stored in the same index
-
getResourceField
- Returns:
- resource id field name used when storing a new message
-